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Virtualization is increasingly being used to address server management and 
administration issues like flexible resource allocation, service isolation and workload 
migration. In a virtualized environment, the virtual machine monitor (VMM) is the primary 
resource manager and is an attractive target for implementing system features like 
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File-system integrity tools (FIT) are commonly deployed host-based intrusion detections 
(HIDS) tool to detect unauthorized file-system changes. While FIT are widely used, this 
kind of HIDS has many drawbacks: the intrusion detection is not done in real-time . 
manner, which might render the whole scheme useless if the attacker can somehow take 
over the system with privileged access in the time between. The administrator also has a 
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Demands for implementing original OSs that can achieve high I/O performance on PC/AT 
compatible hardware have recently been increasing, but conventional OS debugging 
environments have not been able to simultaneously assure their stability, be easily 
customized to new OSs and new I/O devices, and assure efficient execution of I/O 
operations. We therefore developed a novel OS debugging method using a lightweight 
virtual machine. We evaluated this debugging method experimentally and confirmed 
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A virtual machine monitor allows several different operating systems to run concurrently 
on the same machine. This paper presents the description of a virtual machine monitor 
and its support structure which can be implemented on a microprogrammable 
minicomputer or a distributed network of such machines. In our approach, all storage, 
transformational, input, and output resources of the system are accessed through a 
mapping mechanism. The design and implementation methodology for an actuahre ... 
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We have designed and implemented a virtual machine monitor (VMM) for utilizing non- 
dedicated clusters. The VMM virtualizes a shared-memory multi -processor machine on a 
commodity cluster. In addition, it hides dynamic changes of physical hardware 
configurations. The experimental result demonstrates the feasibility of our approach. 
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Maintenance is the dominant source of downtime at high availability sites. Unfortunately, 
the dominant mechanism for reducing this downtime, cluster rolling upgrade, has two 
shortcomings that have prevented its broad acceptance. First, cluster-style maintenance 
over many nodes is typically performed a few nodes at a time, mak-ing maintenance slow 
and often impractical. Second, cluster-style maintenance does not work on single-node 
systems, despite the fact that their unavailability during mainte ... 
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Virtual Machine (VM) environments (e.g., VMware and Xen) are experiencing a resurgence 
of interest for diverse uses including server consolidation and shared hosting. An 
application's performance in a virtual machine environment can differ markedly from its 
performance in a non-virtualized environment because of interactions with the underlying 
virtual machine monitor and other virtual machines. However, few tools are currently 
available to help debug performance problems in virtual machine envi ... 
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This paper describes the techniques used to implement an efficient virtual machine facility 
within MTS for the IBM System/360 Mode! 67. The goals of the project were to support 
the IBM Operating System, including the Indexed Sequential Access Method and 
Teleprocessing capabilities, as a subsystem under MTS with a maximum teleprocessing 
degradation of 30% for OS/360 programs and complete protection between OS/360 and 
MTS. The first attempt, using channel program relocation similar to that em ... 
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We present a flexible architecture for trusted computing, called Terra, that allows 
applications with a wide range of security requirements to run simultaneously on 
commodity hardware. Applications on Terra enjoy the semantics of running on a separate, 
dedicated, tamper-resistant hardware platform, while retaining the ability to run side-by- 
side with normal applications on a general-purpose computing platform. Terra achieves 
this synthesis by use of a trusted virtual machine monitor (TVMM .... 
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We describe here the features and the implementation of a system that collects 
information about the activity of the virtual machines generated by CP-67. This system 
can collect information about CPU usage and I/O activity of the virtual machine without 
interfering with its operation and without knowing what the system running in the virtual 
machine is doing. In this sense it behaves like an hardware monitor behaves on a real 
machine, and hence has been called Virtual Hardware Mo ... 
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This paper proposes the use of virtual machine architectures as a means of modeling and 
analyzing networks and distributed computing systems. The requirements for such 
modeling and analysis are explored and defined along with an illustrative study of an X.25 
link-level protocol performance under normal execution conditions. The virtualizable 
architecture used in this work is the Data General Nova 3/D. 
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In this paper, a virtual distributed monitoring environment called HyperSpector is 
described that achieves secure intrusion detection in distributed computer systems. While 
multiple intrusion detection systems (IDSes) can protect a distributed system from 
attackers, they can increase the number of insecure points in the protected system. 
HyperSpector overcomes this problem without any additional hardware by using 
virtualization to isolate each IDS from the servers it monitors. The IDSes a ... 
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A paper by Hand et al. at the recent HotOS workshop re-examined microkernels and 
contrasted them to virtual-machine monitors (VMMs). It found that the two kinds of 
systems share architectural commonalities but also have a number of technical 
differences which the paper examined. It concluded that VMMs are a special case of 
microkernels, "microkernels done right". A closer examination of that paper shows that it 
contains a number of statements which are poorly justified or even refuted by t ... 
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Desktop distributed computing allows companies to exploit the idle cycles on pervasive 
desktop PC systems to increase the available computing power by orders of magnitude 
(lOx - lOOOx). Applications are submitted, distributed, and run on a grid of desktop PCs. 
Since the applications may be malformed, or malicious, the key challenges for a desktop 
grid are how to 1) prevent the distributed computing application from unwarranted access 
or modification of data and files on the desktop PC, 2) contro ... 

Keywords: desktop grids, grid computing, virtual machine 

17 High performance computin g-supercom putin g : A case for high performance §§§ 
computing with virtual machines 

Wei Huang, Jiuxing Liu, Bulent Abali, Dhabaleswar K. Panda 
June 2006 Proceedings of the 20th annual international conference on 

Supercomputing ICS '06 
Publisher: ACM Press 

Full text available: ^ pdf(431 .08 KB) Additional Information: full citation , abstract , references 

Virtual machine (VM) technologies are experiencing a resurgence in both industry and 
research communities. VMs offer many desirable features such as security, ease of 
management, OS customization, performance isolation, check-pointing, and migration, 
which can be very beneficial to the performance and the manageability of high 
performance computing (HPC) applications. However, very few HPC applications are 
currently running in a virtualized environment due to the performance overhead of 
virtuali ... 
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This paper describes the Denali isolation kernel, an operating system architecture that 
safely multiplexes a large number of untrusted Internet services on shared hardware. . 
Denali's goal is to allow new Internet services to be "pushed" into third party 
infrastructure, relieving Internet service authors from the burden of acquiring and 
maintaining physical infrastructure. Our isolation kernel exposes a virtual machine 
abstraction, but unlike conventional virtual machine monitors, Denali does not ... 

19 Queue Focus: The Reincarnation of Virtual Mac hines j| 
Mendel Rosenblum 

July 2004 Queue, Volume 2 Issue 5 

http://portal.acm.org/results.cfm 4/3/2007 



Results (page 1): virtual machine monitor Page 6 of 6 

Publisher: ACM Press 
Full text available: fiBpdf( 853.72 KB ) 



, ^ n . . Additional Information: full citation , citing s, index terms 
html (2 4.29 KB ) 



20 Scalability, performance , and real-time: Friendl y virtual machines: leveraging a 




feedback-control model for ap pli cation adaptation 

Yutlng Zhang, Azer Bestavros, Mina Guirguis, Ibrahim Matta, Richard West 

June 2005 Proceedings of the 1st ACM/USENIX international conference on Virtual 

execution environments VEE '05 
Publisher: ACM Press 

Full text available:^) pdf(31 7.34 KB) Additional Information: full citation, abstract , references , index terms 

With the increased use of "Virtual Machines" (VMs) as vehicles that isolate applications 
running on the same host, it is necessary to devise techniques that enable multiple VMs 
to share underlying resources both fairly and efficiently. To that end, one common 
approach is to deploy complex resource management techniques in the hosting 
infrastructure. Alternately, in this paper, we advocate the use of self-adaptation in the 
VMs themselves based on feedback about resource usage and availability. Co ... 
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